Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031613a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031613a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          S9IqgMeCVy2E13J3THbFUoe7Am/YMGAN/4q1aK7J6KE=
Subject key identifier:   D8:35:E0:82:7B:BA:67:8A:17:2D:4A:A4:CF:1F:87:17:CF:D4:BD:84
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       239454E197CA9C9AEA82FD0542AC1D564F4A7887
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031613a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        2804:60d4:701a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:94:54:e1:97:ca:9c:9a:ea:82:fd:05:42:ac:1d:56:4f:4a:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=D835E0827BBA678A172D4AA4CF1F8717CFD4BD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:dd:76:d0:c5:d7:75:8f:34:11:09:fd:c1:
                    fd:30:ad:ca:52:7b:bd:6d:e2:7d:c0:08:25:ba:3c:
                    17:8c:e3:78:f9:94:b3:dd:e8:ae:b1:19:72:2a:b6:
                    6a:ea:f8:82:a1:f6:bd:7d:34:2c:b2:9c:96:aa:ec:
                    18:1e:5c:1a:94:3f:a3:80:3e:5f:bc:19:f6:43:e8:
                    14:09:f5:0c:e3:8e:03:5c:01:57:f8:bd:c3:7a:07:
                    69:43:c9:9b:94:a7:80:16:a2:1b:dd:16:9c:91:6a:
                    de:da:af:b4:ef:f4:63:fd:ad:cb:15:83:a0:48:6b:
                    70:5d:16:4b:1e:33:cf:47:b4:89:f2:45:60:4d:b9:
                    c3:76:84:5f:2b:e4:0d:ea:ac:63:48:96:21:92:cd:
                    28:f6:67:bf:6d:7c:97:67:b7:26:e4:50:1e:06:c6:
                    fe:5e:f0:e6:94:cb:ab:56:a5:e7:4e:ce:f2:6c:8a:
                    eb:7e:3d:c2:f5:92:de:28:51:e2:6d:c5:54:ec:0a:
                    d5:c2:8d:af:33:7c:3c:5f:a4:49:27:4f:01:6a:c5:
                    8a:99:5b:a4:e8:a7:e3:f9:6d:d2:b5:0d:a5:05:2b:
                    1a:03:ac:46:23:3e:b9:78:31:38:a7:4e:99:9e:79:
                    02:6e:10:ad:f9:0b:18:2a:00:e6:64:86:b1:d9:a8:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:E0:82:7B:BA:67:8A:17:2D:4A:A4:CF:1F:87:17:CF:D4:BD:84
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031613a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:701a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:8b:1e:36:30:5b:a3:9c:bf:6d:57:25:80:f0:a8:7a:66:2d:
         93:c2:89:1a:7a:92:96:e1:f9:f2:f8:a1:70:43:26:08:36:f9:
         2c:53:07:9d:7b:6c:70:ff:61:2a:b9:71:91:4d:dd:f7:d0:cb:
         48:89:30:0c:90:5a:52:94:8c:6d:39:d8:a7:ec:bb:72:c5:fd:
         db:a0:83:38:10:50:46:a1:d1:10:a4:89:9c:ad:15:26:5e:54:
         3e:5a:75:90:e8:42:49:6b:1d:2a:d6:93:06:56:4e:87:2e:3c:
         3e:c3:35:e3:6d:bc:04:b5:22:be:d9:36:cb:34:e9:96:70:af:
         af:17:ff:dd:16:14:bc:5b:19:f1:01:c8:70:c5:6c:9f:8f:28:
         86:31:3c:c8:92:9d:f1:58:9e:20:61:fd:ca:5d:cb:39:00:45:
         8a:6d:e2:fc:dc:9d:ff:b5:cb:78:67:2c:f8:23:fc:00:8c:c8:
         05:52:c1:eb:01:58:a5:8d:41:7a:3b:39:09:26:f6:44:be:f9:
         3f:eb:fc:f3:d1:99:0b:87:53:0a:87:84:89:39:8b:4e:f1:64:
         79:f2:75:60:4c:cf:4d:da:bc:2f:d1:d8:65:bc:09:88:80:0d:
         36:a9:0d:21:63:e4:83:00:1c:67:d2:c5:68:34:20:45:f2:e0:
         b7:6e:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net